Linux Kernel Vulnerability Discovered, Allowing Local Privilege Escalation
Cybersecurity vendor Qualys has identified a logic bug in the Linux kernel, indexed as CVE-2026-46333, which can be exploited to escalate user privileges to root superuser status. The flaw, introduced in November 2016, abuses the __ptrace_may_access() function, allowing local attackers to read password hashes, steal SSH keys, and execute arbitrary commands as root. Qualys provided four proofs-of-concept demonstrating the vulnerability's exploitation on default installations of Debian, Ubuntu, and Fedora distributions. A patch has been issued following Qualys's report, but the vulnerability's historical exposure spans nearly a decade, affecting enterprise fleets, cloud images, and container hosts.